Local File Inclusion (LFI)

🗓️ 20 Nov 2024 03:48:10Reported by Veracode Vulnerability DatabaseType

symfony/runtime has a Local File Inclusion vulnerability due to improper argv value handling.

Reporter	Title	Published	Views	Family All 46
AstraLinux	Astra Linux - уязвимость в symfony	11 Feb 202507:35	–	astralinux
Circl	CVE-2024-50340	6 Nov 202421:10	–	circl
CNNVD	Symfony 注入漏洞	6 Nov 202400:00	–	cnnvd
CVE	CVE-2024-50340	6 Nov 202421:09	–	cve
Cvelist	CVE-2024-50340 Ability to change environment from query in symfony/runtime	6 Nov 202421:09	–	cvelist
Debian	[SECURITY] [DSA 5809-1] symfony security update	11 Nov 202419:06	–	debian
Debian	[SECURITY] [DSA 6312-1] symfony security update	31 May 202612:26	–	debian
Debian	[SECURITY] [DSA 6317-1] symfony security update	1 Jun 202618:04	–	debian
Debian CVE	CVE-2024-50340	6 Nov 202421:09	–	debiancve
Tenable Nessus	Debian dsa-5809 : php-symfony - security update	11 Nov 202400:00	–	nessus

Vulners

Node

runtime symfony/runtimeRangev5.3.0-BETA1–5.3.0-BETA1php

runtime symfony/runtimeRangev6.0.0-BETA1–6.0.0-BETA1php

runtime symfony/runtimeRangev7.0.0-BETA1–7.0.0-BETA1php

symfony symfony/symfonyRangev5.3.0-BETA1–5.3.0-BETA1php

symfony symfony/symfonyRangev6.0.0-BETA1–6.0.0-BETA1php

symfony symfony/symfonyRangev7.0.0-BETA1–7.0.0-BETA1php

Source	Link
github	www.github.com/symfony/symfony/commit/a77b308c3f179ed7c8a8bc295f82b2d6ee3493fa
symfony	www.symfony.com/blog/cve-2024-50340-ability-to-change-environment-from-query
github	www.github.com/advisories/GHSA-x8vp-gf4q-mw5j
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2024-50340.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/runtime/CVE-2024-50340.yaml

21 Nov 2024 13:04Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.17.3

EPSS0.88664

SSVC